Nostr Web Client

What are you thinking through here? Are you still arguing in favor of deleting?

1. I didn’t understand this point very well sorry. But I didn’t know it was possible to insert events in the past. (Am not a developer). Interesting.

2. When you say the attacker can start deleting, does that mean that there is already some functionality that allows deleting (and actually guarantees it)? I thought as of now it’s impossible to delete.

Vitor Pamplona 2y ago

There is a "request to delete" event you can sign and send to relays. Most of them will delete your post by now. So, if your keys leak, it doesn't matter if this service exists or now, they can just send a bunch of delete events, signed as you, while at the same time add new, fake ones, with whatever they want to scam your followers with.

Reply to this note

Please Login to reply.

Discussion

Aurora 2y ago

Yeah. Dangerous.

There could also be a “bad actor” relay though right? That doesn’t comply with delete requests and is just storing things for some potentially evil purpose?

Vitor Pamplona 2y ago

Yep.

Aurora 2y ago

I think it would be worthwhile for someone to start making personal internet security tools for nostr. I don’t know if I phrased that right. But basically personal cybersecurity. I would pay for that.